(ITS#3877) Enhancement: openldapACIValidate implementation

[nikita.shulga@gmail.com]

Full_Name: Nikita Shulga
Version: HEAD
OS: Linux
URL: ftp://ftp.openldap.org/incoming/nikita-shulga-050722.patch
Submission from: (NULL) (80.73.161.132)


In attached patch openldapACIValidate function is implemented.
It checks that openldapACI entry are syntaxicaly valid, 
although it doesn't check sanity of this aci - for example, 
aci_list_get_rights allows more then one grant|deny clause in aci, so validator
allows it to, despite the fact that aclmodel draft prohibits more then one
grant|deny entry, etc...
Also, subject are yet not validated, since it validation depends of subject
type

I'm not sure that this is needed, but just in case:

I, Nikita Shulga, hereby place the following modifications to OpenLDAP Software
(and only these modifications) into the public domain. Hence, these
modifications may be freely used and/or redistributed for any purpose with or
without attribution and/or other notice.